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1 Web services: Web services enterprise security architecture: a case study 
Carlos Gutierrez, Eduardo Fernandez-Medina, Mario Piattini 

November 2005 Proceedings of the 2005 workshop on Secure web services SWS '05 
Publisher: ACM Press 

Full text available: ^ pdf(341.82 KB) Additional Information: full citation , abstract , references , index terms 

Web Services (WS hereafter) Security is a crucial aspect for technologies based on this 
paradigm to be completely adopted by the industry. As a consequence, a lot of* 
initiativesof initiatives have arisen during the last years setting as their main purpose the 
standardization of the security factors related to this paradigm. In fact, over the past 
years, the most important consortiums ofof Internet Internet, like IETF, W3C or OASIS, 
are producing a huge number of WS-based security standards. Desp ... 



Keywords: security, software architecture, software development process, web services 



2 Web technologies and applications (WTA): Migration to web services oriented 
architecture: a case study 
Jia Zhang, Jen-Yao Chung, Carl K. Chang 

March 2004 Proceedings of the 2004 ACM symposium on Applied computing SAC '04 
Publisher: ACM Press 

Full text available' fi3 Ddf(1 59 22 KB) Additional Information: full citation , abstract , references , citings, index 
' ^ terms 

The rapid emerging of web-services technology is dramatically changing the scenario of 
web application design and development. This paper presents a web-services oriented 
architecture. As a case study, the paper reports on an on-going project on the design and 
development of a pass-through authentication web-services for on-line electronic 
payment applications. This is a first step towards an electronic payment web-service. 

Keywords: Web application development, case study, software architecture, web 
services oriented architecture 



Process modeling in Web a p plications 

Marco Brambilla, Stefano Ceri, Piero Fraternali, Ioana Manolescu 

October 2006 ACM Transactions on Software Engineering and Methodology (TOSEM), 

Volume 15 Issue 4 
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Publisher: ACM Press 

Full text available: ^ pdf(1.17 MB) Additional Information: full citation , abstract , references , index terms 

While Web applications evolve towards ubiquitous, enterprise-wide or multienterprise 
information systems, they face new requirements, such as the capability of managing 
complex processes spanning multiple users and organizations, by interconnecting 
software provided by different organizations. Significant efforts are currently being 
invested in application integration, to support the composition of business processes of 
different companies, so as to create complex, multiparty business scenarios. ... 

Keywords: Web applications, Web engineering, conceptual modeling, worfklows 



4 En g ineerin g web cache consistency 



August 2002 ACM Transactions on Internet Technology (TOIT), volume 2 issue 3 
Publisher: ACM Press 



Server-driven consistency protocols can reduce read latency and improve data freshness 
for a given network and server overhead, compared to the traditional consistency 
protocols that rely on client polling. Server-driven consistency protocols appear 
particularly attractive for large-scale dynamic Web workloads because dynamically 
generated data can change rapidly and unpredictably. However, there have been few 
reports on engineering server-driven consistency for such workloads. This article repo ... 

Keywords: Cache coherence, cache consistency, dynamic content, lease, scalability, 



5 Model- based functional conformance testing of web servi ces o peratin g on persistent jj| 

§> data 

Avik Sinha, Amit Paradkar 

July 2006 Proceedings of the 2006 workshop on Testing, analysis, and verification of 
web services and applications TAV-WEB '06 

Publisher: ACM Press 

Full text available: ^| pdf(1 76.89 KB) Additional Information: full citation , abstract , references , index terms 

We propose a model based approach to functional conformance test generation for web 
services which operate in the presence of persistent data. Typically, web services are 
described in a standard notation called Web Services Description Language (WSDL). 
Unfortunately, WSDL standard does not allow behavioral specification (such as pre- and 
postconditions)of web services in the presence of persistent data. New standards which 
remedy this situation are being proposed (such as WSDL-S). In this paper, ... 

6 Workshop on testing, analysis and verification of web services (TAV-WEB) papers: j 
^ Modelling and verifying web service orchestration by means of the concurrenc y 

workbench 

Mariya Koshkina, Franck van Breugel 

September 2004 ACM SIGSOFT Software Engineering Notes, volume 29 issue 5 
Publisher: ACM Press 

Full text available: ^| pdf(239.55 KB ) Additional Information: full citation , abstract , references , index terms 

Verification techniques like model checking, preorder checking and equivalence checking 
are shown to be relevant to web service orchestration. The Concurrency Workbench of the 
New Century (CWB) is a verification tool that supports these verification techniques. By 
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means of the Process Algebra Compiler (PAC), the CWB is modified to support the BPE- 
calculus. The BPE-calculus is a small language, based on BPEL4WS, to express web 
service orchestration. Both the syntax and the semantics of the BPE-ca ... 

Keywords: BPEL4WS, business process, concurrency workbench of the new century, 
modelling, process algebra compiler, verification, web service 

The Web Service Discovery Architecture 
Wolfgang Hoschek 

November 2002 Proceedings of the 2002 ACM/IEEE conference on Supercomputing 
Supercomputing '02 

Publisher: IEEE Computer Society Press 

Full text available: fiQpdf( 282.28 KB) Additional Information: full citation, abstract , references , citings, index 

terms 

In this paper, we propose the Web Service Discovery Architecture (WSDA). At runtime, 
Grid applications can use this architecture to discover and adapt to remote services. 
WSDA promotes an interoperable web service discovery layer by defining appropriate 
services, interfaces, operations and protocol bindings, based on industry standards. It is 
unified because it subsumes an array of disparate concepts, interfaces and protocols 
under a single semi-transparent umbrella. It is modular because it def ... 

8 Service requirements and design methodology: Pitfalls of OWL-S: a practical 
<g> semantic web use case 
^ Steffen Balzer, Thorsten Liebig, Matthias Wagner 

November 2004 Proceedings of the 2nd international conference on Service oriented 
computing ICSOC '04 

Publisher: ACM Press 

Full text available- IB pdf(872 04 KB) Additional Information: fuil citation , abstract, references, citings, index 
' ^ terms , review 

OWL-S is a combined effort of the Semantic Web and the Web Service community to 
facilitate an intelligent service provisioning on the Semantic Web. The vision of OWL-S 
includes automatic service discovery, invocation, composition, orchestration and 
monitoring of Web-Services through their semantic descriptions. In this paper, we 
investigate the practical applicability of the current OWL-S specification and show that, in 
spite of the large momentum of OWL-S, significantly more work needs to be ... 

Keywords: OWL-S, semantic web services 



9 Business-to-business e-commerce track: Website optimization with web metrics: a ||| 




case study 

Birgit Weischedel, Eelko K. R. E. Huizingh 



August 2006 Proceedings of the 8th international conference on Electronic 

commerce: The new e-commerce: innovations for conquering current 
barriers, obstacles and limitations to conducting successful business on 
the internet ICEC '06 
Publisher: ACM Press 

Full text available: Q pdf ( 395.25 KB) Additional Information: full citation , abstract, references , index terms 

Web metrics are the measures that reflect how customers are using a website. Companies 
use these metrics for further improvement of their website. Although most companies 
today are engaged in website optimization, the actual use of web metrics is a relatively 
unexplored area. In this paper we address this topic by first reviewing the strengths and 
weaknesses of the most important source of web metrics (web logs) and then conducting 
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an extensive case study. The literature review revealed a number ... 

Keywords: case study, clickstream data, measures, server log, web metrics, website 
optimization 



10 Design and evaluation of a conit-based continuous consistency model for replicated 
services 

Haifeng Yu, Amin Vahdat 

August 2002 ACM Transactions on Computer Systems (TOCS), volume 20 issue 3 
Publisher: ACM Press 

Full text available- 153 pdf(406 85 KB) AdditionaI Information: full citation, abstract, references , citings, index 
• lA] • terms 

The tradeoffs between consistency, performance, and availability are well understood. 
Traditionally, however, designers of replicated systems have been forced to choose from 
either strong consistency guarantees or none at all. This paper explores the semantic 
space between traditional strong and optimistic consistency models for replicated 
services. We argue that an important class of applications can tolerate relaxed 
consistency, but benefit from bounding the maximum rate of inconsistent access ... 

Keywords: Conit, consistency model, continuous consistency, network services, relaxed 
consistency, replication 



11 Innovation, mana g ement & strate g y: A web-based consumer-oriented intelli g ent 
^ decision su p port system for personalized e-services 
^ Chien-Chih Yu 

March 2004 Proceedings of the 6th international conference on Electronic commerce 
ICEC'04 

Publisher: ACM Press 

Full text available: ^ pdf(479.14 KB) Additional Information: full citation , abstract , references , index terms 

Due to the rapid advancement of electronic commerce and web technologies in recent 
years, the concepts and applications of decision support systems have been significantly 
extended. One quickly emerging research topic is the consumer-oriented decision support 
system that provides functional supports to consumers for efficiently and effectively 
making personalized decisions. In this paper we present an integrated framework for 
developing web-based consumer-oriented intelligent decision support sy ... 

Keywords: decision making process, e-services, intelligent decision support system, 
personalization 



12 Session 2: A privacy controller approach for privacy protection in web services 
George O. M. Yee 

November 2007 Proceedings of the 2007 ACM workshop on Secure web services SWS 
07 

Publisher: ACM 

Full text available: ^[pdf(300.94 KB) Additional Information: full citation , abstract , references , index terms 

The growth of the Internet has been accompanied by the growth of web services (e.g. e- 
commerce, e-health). This increased use of web services has meant that more and more 
user personal information is being shared with web service providers, leading to the need 
to protect the privacy of web service users, as evidenced by the enactment of privacy 
legislation in many jurisdictions. Existing privacy policy approaches for privacy protection, 
such as making the service provider's privacy policy kno ... 
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Keywords: privacy controller, privacy protection, user privacy policy, web services 



13 Cache architecture for on-demand streamin g on the Web 
Ay Raj Sharman, Shiva Shankar Ramanna, Ram Ramesh, Ram Gopal 
>r September 2007 ACM Transactions on the Web (TWEB), Volume l issue 3 
Publisher: ACM Press 

Full text available: ^| pdf(768.75 KB ) Additional Information: full citation , abstract, references , index terms 

On-demand streaming from a remote server through best-effort Internet poses several 
challenges because of network losses and variable delays. The primary technique used to 
improve the quality of distributed content service is replication. In the context of the 
Internet, Web caching is the traditional mechanism that is used. In this article we develop 
a new staged delivery model for a distributed architecture in which video is streamed from 
remote servers to edge caches where the video is buff ... 

Keywords: Web caching, buffering, edge cache, on-demand streaming, quality of 
service, selective retransmissions 




14 Service composition: Mixed initiative use cases for semi-automated service 

composition: a survey 
Jan Schaffner, Harald Meyer 

May 2006 Proceedings of the 2006 international workshop on Service-oriented 

software engineering SOSE '06 
Publisher: ACM Press 

Full text available: ^) pdf(161.40 KB ) Additional Information: full citation , abstract, references , index terms 

Semi-automated service composition with mixed initiative interactions, where both user 
and machine jointly contribute to the creation of composed services, is currently subject 
to intensive research. In this paper, we give an overview over recent research approaches 
by presenting three different semi-automated service composition tools. As the main 
contribution of this paper, we introduce three mixed initiative use cases characteristic for 
semi-automated composition, which we have extracted and ... 

Keywords: business process management, mixed initiative, semi-automated, service 
composition, web service 



15 Web services: composition , integ ration and interoperability: Adaptive resource 
sharing in a web services environment 
Vijay K. Naik, Swaminathan Sivasubramanian, Sriram Krishnan 

October 2004 Proceedings of the 5th ACM/IFIP/USENIX international conference on 
Middleware Middleware '04 

Publisher: Springer-Verlag New York, Inc. 

Full text available: pdf(266.25 KB) Additional Information: full citation , abstract , references 

One effect of the push towards business process automation and IT consolidation is that 
low-level resources from multiple administrative domains are shared among multiple 
workloads and the middleware is called upon to bring about the integration while masking 
the details of sharing such resources. Web services and grid based technologies hold 
promise for developing such middleware. However, existing solutions do not extend well 
when resources to be shared belong to multiple administrative domain ... 
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Usin g Web Service Technolo g ies to Create an Information Broker: An Experience 
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Report 

Mark Turner, Fujun Zhu, Ioannis Kotsiopoulos, Michelle Russell, David Budgen, Keith 

Bennett, Pearl Brereton, John Keane, Paul Layzell, Michael Rigby 

May 2004 Proceedings of the 26th International Conference on Software 

Engineering ICSE '04 
Publisher: IEEE Computer Society 

Full text available: ^E[ pdf(305.99 KB ) Additional Information: full citation , abstract , index terms 

This paper reports on our experiences with using theemerging web service technologies 
and tools to create ademonstration information broker system as part of ourresearch into 
information management in a distributedenvironment. To provide a realistic context we 
chose tostudy the use of information in the healthcare domain, and this context sets some 
challenging parameters andconstraints for our research and for the demonstrationsystem. 
In this paper we both report on the extent towhich existing we ... 

17 Web and e-business a p plication: A p plication run time estimation: a quality of service 

^ metric for web-based data mining services 

^ Shonali Krishnaswamy, Seng Wai Loke, Arkady Zaslavsky 

March 2002 Proceedings of the 2002 ACM symposium on Applied computing SAC '02 

Publisher: ACM Press 

Full text available* fiEl pdf (685.04 KB) Additional Information: full citation , abstract , references , citings , index 

terms 

The emergence of Application Service Providers (ASP) hosting Internet-based data mining 
services is being seen as a viable alternative for organisations that value their knowledge 
resources but are constrained by the high cost of data mining software. Response time is 
an important Quality of Service (QoS) metric for web-based data mining service 
providers. The ability to estimate the response time of data mining algorithms apriori 
benefits both clients and service providers. The advantage for th ... 

Keywords: application run time estimation, data mining e-services, quality of service, 
rough sets 



18 DOS protection: Usin g gra phic turing tests to counter automated DDoS attacks 
^ ag ainst web servers 

^ William G. Morein, Angelos Stavrou, Debra L. Cook, Angelos D. Keromytis, Vishal Misra, Dan 
Rubenstein 

October 2003 Proceedings of the 10th ACM conference on Computer and 

f communications security CCS '03 

Publisher: ACM Press 

Full text available* t 51 ! pdf(256 83 KB) Add ' tlonal Information: full citation , abstract , references , citing s, index 
"~ terms 

We present WebSOS, a novel overlay-based architecture that provides guaranteed access 
to a web server that is targeted by a denial of service (DoS) attack. Our approach exploits 
two key characteristics of the web environment: its design around a human-centric 
interface, and the extensibility inherent in many browsers through downloadable 
"applets." We guarantee access to a web server for a large number of previously unknown 
users, without requiring pre-existing trust relationships between ... 

Keywords: Java, graphic turing tests, web proxies 



19 Providing a holistic perspective to evaluating e-service quality in web-based systems: 
a multi-stakeholder approach 
Herschel Nomdoe, Shaun Pather 
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October 2007 Proceedings of the 2007 annual research conference of the South 

African institute of computer scientists and information technologists 
on IT research in developing countries SAICSIT '07 

Publisher: ACM Press 

Full text available: ^| pdf(140.44 KB ) Additional Information: full citation , abstract , references , index terms 

Over a period spanning approximately twenty five years IS researchers have been 
plagued by the problem of how to evaluate IS effectiveness or success. After the advent 
of the WWW in the 1990s, questions have arisen regarding the relevance of previously 
established evaluation approaches to the evaluation of web-based IS. In this paper, we 
describe a holistic approach to Information Systems (IS) evaluation, focusing on web- 
based applications. In this context, a holistic perspective refers to a ... 

Keywords: IS effectiveness, IS evaluation, IS stakeholder, IS success, e-SQ, electronic 
service quality, information systems, service quality, web 



20 Principled design of the modem Web architecture j 
Roy T. Fielding, Richard N. Taylor 

May 2002 ACM Transactions on Internet Technology (TOIT), volume 2 issue 2 
Publisher: ACM Press 

Full text available* fl3 pdf(335 47 KB) Ac,d ^ ona, Information: full citation , abstract , references , citings , index 
' ^ terms 

The World Wide Web has succeeded in large part because its software architecture has 
been designed to meet the needs of an Internet-scale distributed hypermedia application. 
The modern Web architecture emphasizes scalability of component interactions, generality 
of interfaces, independent deployment of components, and intermediary components to 
reduce interaction latency, enforce security, and encapsulate legacy systems. In this 
article we introduce the Representational State Transfer (REST) arc ... 

Keywords: Network-based applications, REST, World Wide Web 
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